Welcome to that latest chapter in the war on spam. What you are seeing are connections from zombie computers. These are computers that are infected with viruses. The primary purpose of some of the newer virus is to create zombie computers which are then used for distributed spam ?attacks.? The best way to fight this is to use a gateway or front end to your Exchange that is user aware. John Tolmachoff Engineer/Consultant/Owner eServices For You -----Original Message----- From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx] Sent: Monday, December 06, 2004 5:56 AM To: [ExchangeList] Subject: [exchangelist] Directory Harvest Attack http://www.MSExchange.org/ Hello All, I?ve been suffering a DHA for the last two weeks. Nothing major, just a couple of e-mails per minute, but it is clogging my spam box with all kinds of invalid addresses. I?ve disabled NDR´s so the dude who?s sending these things won?t be able to know which e-mails are valid or not. I´ve tracked these messages and they appear to be coming from all over the place. How can I fight it? Disabling NDR´s is not a cool solution because people can´t know if a message was delivered here. Thanks in advance, Tiago ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: johnlist@xxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx